FluffyStack toolsJurisdictional exposure
Sub-services (3)
payShield 10K
Single-tenant Thales payment HSM with FIPS 140-2 Level 3 and PCI PTS HSM validation
payShield Manager
Thales remote management for HSM configuration and key ceremonies
payShield Trusted Management Device
Thales device for secure remote key loading and administration
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (13)
- Australia Central · CanberraAzure Australia Government
- Australia Central 2 · CanberraAzure Australia Government
- US Gov Virginia · VirginiaAzure Government (US)
- US Gov Arizona · ArizonaAzure Government (US)
- US Gov Texas · TexasAzure Government (US)
- US DoD East · VirginiaAzure Government (US DoD regions)
- US DoD Central · IowaAzure Government (US DoD regions)
- China North (Beijing) · BeijingMicrosoft Azure operated by 21Vianet
- China East (Shanghai) · ShanghaiMicrosoft Azure operated by 21Vianet
- China North 2 · BeijingMicrosoft Azure operated by 21Vianet
- China East 2 · ShanghaiMicrosoft Azure operated by 21Vianet
- China North 3 · HebeiMicrosoft Azure operated by 21Vianet
- China East 3 · ShanghaiMicrosoft Azure operated by 21Vianet
Commercial regions (61)
Europe (21)
- Austria East
- Belgium Central
- Denmark East
- Finland Central
- France South
- France Central
- Germany North
- Germany West Central
- Greece Central
- North Europe
- Italy North
- West Europe
- Norway East
- Norway West
- Poland Central
- Spain Central
- Sweden Central
- Switzerland West
- Switzerland North
- UK West
- UK South
North America (13)
- Canada East
- Canada Central
- Mexico Central
- West US
- East US 3
- North Central US
- Central US
- West US 3
- South Central US
- East US
- East US 2
- West US 2
- West Central US
South America (3)
- Brazil Southeast
- Brazil South
- Chile Central
Asia (14)
- East Asia
- South India
- India South Central
- Jio India West
- West India
- Jio India Central
- Central India
- Indonesia Central
- Japan West
- Japan East
- Malaysia West
- Southeast Asia
- Korea South
- Korea Central
Oceania (3)
- Australia East
- Australia Southeast
- New Zealand North
Middle East (5)
- Israel Central
- Qatar Central
- Saudi Arabia Central
- UAE Central
- UAE North
Africa (2)
- South Africa West
- South Africa North
Tags
Equivalent services on other platforms
Managed key and secrets service with software and hardware-backed (HSM) key management, envelope encryption for Alibaba Cloud services, automatic rotation and dedicated KMS instances
Single-tenant FIPS 140-3 Level 3 hardware security modules in your VPC for keys you must hold yourself: code signing, document signing, TLS offload and PKI roots where multi-tenant KMS is not acceptable for compliance.
FIPS 140-2 Level 3 hardware-protected keys exposed through the same Cloud KMS API as software keys — keys never leave the HSM hardware boundary, supporting workloads (PKI roots, code-signing, regulated payment flows) that need a hardware attestation rather than a multi-tenant software KMS
Unified cryptographic services including Key Management Service for envelope encryption, Cloud Secret Management Service for secret storage and rotation, Key Pair Service for SSH key management, and Dedicated HSM for FIPS 140-2 Level 3 workloads
Confidential computing family built on IBM LinuxONE and Secure Execution for Linux, including Hyper Protect Virtual Servers and Hyper Protect Crypto Services, whose keep-your-own-key HSMs are built on FIPS 140-2 Level 4 certified hardware that even IBM cannot access